DEV Community

Discussion on: I'm a security auditor and researcher, Ask Me Anything!

Collapse
 
ondrejs profile image
Ondrej

Ah, I forgot second question - if you use Debian, do you use Testing (Unstable) version? If yes, do you patch your kernel with grsecurity patches? I have tried in in the past but it was nightmare in terms of maintenance and some binaries did not even work.
Don't you think that CentOS (which has SELinux by default) would be safer in case if you don't use kernel hardening patches? Thanks!